Pennsylvania HB 1624: An Act prohibiting certain covered entities and service providers from collecting and processing location information of individuals without consent; providing for enforcement by Attorney General; establishing a private right of action; and prescribing penalties.

Bill Text

PRINTER'S NO. 1965
THE GENERAL ASSEMBLY OF PENNSYLVANIA
HOUSE BILL
No. 1624
Session of
2025
INTRODUCED BY WAXMAN, GIRAL, GAYDOS, McANDREW, SANCHEZ, MAYES,
McNEILL, HILL-EVANS, KHAN, HANBIDGE, CERRATO, NEILSON, WARREN
AND CEPEDA-FREYTIZ, JUNE 18, 2025
REFERRED TO COMMITTEE ON COMMUNICATIONS AND TECHNOLOGY,
JUNE 20, 2025
AN ACT
Prohibiting certain covered entities and service providers from
collecting and processing location information of individuals
without consent; providing for enforcement by Attorney
General; establishing a private right of action; and
prescribing penalties.
The General Assembly of the Commonwealth of Pennsylvania
hereby enacts as follows:
Section 1. Short title.
This act shall be known and may be cited as the Location
Information Protection Act.
Section 2. Definitions.
The following words and phrases when used in this act shall
have the meanings given them in this section unless the context
clearly indicates otherwise:
"Collect." To obtain, infer, generate, create, receive or
access an individual's location information.
"Consent." Permission that is voluntary, specific, informed
and unambiguous. The term does not include any agreement:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

(1) secured without first providing to the individual a
clear and conspicuous disclosure of all information material
to the provision of the agreement, apart from any privacy
policy, terms of service, terms of use, general release, user
agreement or other similar document; or
(2) obtained through the use of a user interface
designed or manipulated with the substantial effect of
subverting or impairing user autonomy, decision making or
choice.
"Covered entity." An individual, partnership, corporation,
limited liability company, association or other group, however
organized. The term includes an agent of an entity. The term
does not include a State or local government agency, or a court
of the Commonwealth, a clerk of the court or a judge or justice
thereof, or an individual acting in a noncommercial context.
"Device." A mobile telephone or other electronic device
located in this Commonwealth that is or may commonly be carried
by or on an individual and is capable of connecting to a
cellular, bluetooth or other wireless network.
"Disclose." To make location information available to a
third party, including sharing, publishing, releasing,
transferring, disseminating, providing access to or otherwise
communicating the location information orally, in writing,
electronically or by any other means.
"Individual." An individual located in this Commonwealth.
"Location information." As follows:
(1) Information derived from a device, or from an
interaction between devices, with or without the knowledge of
the user and regardless of the technological method used,
that pertains to or directly or indirectly reveals the
20250HB1624PN1965 - 2 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

present or past geographical location of an individual or
device with sufficient precision to identify street-level
location information within a range of 1,850 feet or less.
(2) The term includes any of the following:
(i) An internet protocol address capable of
revealing the physical or geographical location of an
individual.
(ii) Global Positioning System coordinates.
(iii) Cell-site location information.
(3) The term does not include information identifiable
or derived solely from the visual content of a legally
obtained image, including the location of the device that
captured the image, or publicly posted words.
"Location privacy policy." A description of the policies,
practices and procedures controlling a covered entity's
collection, processing, management, storage, retention and
deletion of location information.
"Monetize." The selling, renting, trading or leasing of
location information.
"Permissible purpose." Any of the following purposes:
(1) Provision of a product, service or service feature
to the individual to whom the location information pertains
when the individual requested the provision of the product,
service or service feature by subscribing to, creating an
account or otherwise contracting with a covered entity.
(2) Initiation, management, execution or completion of a
financial or commercial transaction to fulfill an order for
specific products or services requested by an individual,
including any associated routine administrative, operational
and account-servicing activity, including billing, shipping,
20250HB1624PN1965 - 3 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

delivery, storage and accounting.
(3) Compliance with an obligation under Federal or State
law.
(4) Response to an emergency service agency, an
emergency alert, a 911 communication or other communication
reporting an imminent threat to human life.
"Process." To perform an action or set of actions on or with
location information, including collecting, accessing, using,
storing, retai